A blockchain-based framework for secure data sharing and access control using IPFS and ECC

Abstract

Outsourcing data to the cloud offers several key advantages, including improved reliability, scalability, and cost efficiency. However, the exponential increase in global data generation has made the protection of sensitive information and secure data sharing increasingly complex and critical. Traditional models of cloud storage and data sharing often depend on centralized platforms or trusted third-party providers to manage access control and secure storage. These centralized approaches are prone to single points of failure and may expose data to privacy breaches or theft resulting from attacks on central servers. This paper proposes a decentralized architecture designed to enhance data sharing security and access control in untrusted cloud environments. Our approach leverages blockchain technology to establish a transparent and tamper-resistant ledger for data transactions, and introduces a decentralized system for authentication and authorization based on trust. The architecture integrates several robust encryption algorithms to protect cloud-stored data against diverse attack vectors. Files are encrypted locally using the Advanced Encryption Standard (AES) before being uploaded to the Interplanetary File System (IPFS), while their metadata is recorded on the blockchain via smart contracts. A data verification mechanism, based on the Elliptic Curve Digital Signature Algorithm (ECDSA) and timestamps, prevents replay attacks and detects unauthorized data modifications. Furthermore, the Elliptic Curve Cryptography (ECC) algorithm secures key management and restricts data access to authorized users. Security analysis demonstrates that the proposed system meets its design goals, and comparisons with related architectures highlight its superior performance in terms of both computational and communication efficiency.

Keywords: Cloud Security, Blockchain, Data Sharing, Access Control, Privacy, Integrity